Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ef30381-3632-34a4-ad10-46bfb8f3d2ec.roa
File:                     3ef30381-3632-34a4-ad10-46bfb8f3d2ec.roa (raw, json)
Hash identifier:          XHBlawGvtEZklIgmjU6X+74v7rHALB3pnxsfmDZggYw=
Subject key identifier:   DC:32:21:8B:CF:9C:F0:B9:C7:9D:8C:4C:79:0F:76:D1:C2:CD:F0:8B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A822699658EE7D1D891C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ef30381-3632-34a4-ad10-46bfb8f3d2ec.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1002:b100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:82:26:99:65:8e:e7:d1:d8:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=a4af4fe0-58b1-4c6e-966f-e78a274b915c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:15:0f:86:ad:92:58:a2:a1:6d:20:e1:93:
                    a3:49:6c:85:6b:ab:61:6f:b6:8d:07:4b:0a:9a:0e:
                    d5:b8:16:14:70:f6:ce:9e:e8:37:5d:10:bd:9e:24:
                    6d:0e:06:ca:fe:fb:28:3a:9f:93:eb:7a:85:ad:ae:
                    2e:5d:e1:e4:4f:ea:d3:c3:ca:3b:ed:67:1c:0f:5c:
                    4a:66:c5:ad:0e:bb:fe:71:22:ba:7c:d8:ec:5f:87:
                    b5:42:9f:e9:ec:13:45:2f:ff:c3:bf:33:b2:b2:42:
                    63:1c:a8:96:d1:0b:50:68:bc:84:e6:00:f3:d3:5b:
                    8e:0f:07:61:18:02:25:9f:4e:ac:9d:e2:f3:cf:57:
                    0c:de:5c:41:03:38:66:df:f1:fa:a6:49:d8:b2:0d:
                    ba:ec:ad:d2:1c:f4:86:93:f9:23:b2:dc:d2:0c:c8:
                    10:3e:00:d6:4c:7a:5b:84:5a:fc:ef:5c:0b:38:e8:
                    f5:2f:c2:bb:b9:62:7d:ed:06:24:bb:83:f5:92:fe:
                    be:ae:19:c8:01:64:ac:40:22:61:31:56:c0:8b:da:
                    f8:59:2f:2a:76:90:ce:dc:87:dc:85:d9:34:b0:77:
                    a0:2a:a4:a1:c1:dc:5d:78:6a:29:52:d2:b1:5b:b8:
                    37:ac:da:d5:31:b6:ee:a4:68:fb:a9:ed:39:67:4b:
                    d6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:32:21:8B:CF:9C:F0:B9:C7:9D:8C:4C:79:0F:76:D1:C2:CD:F0:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ef30381-3632-34a4-ad10-46bfb8f3d2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2b:9f:93:cb:1d:d3:47:1c:71:57:72:29:29:fd:94:a2:2c:
         32:da:56:0f:1d:14:4d:25:5b:d5:2a:69:a0:af:1b:1a:e5:54:
         ed:e8:f8:65:a9:c6:d5:03:07:78:b4:cf:41:48:51:9d:9a:ec:
         f8:23:8c:7f:0d:4a:b5:e9:fa:8e:16:ca:5c:db:4b:ad:48:5e:
         cd:05:40:6d:4f:54:79:86:2d:77:af:9a:30:b9:8e:32:05:82:
         b0:27:ce:fe:18:b5:84:d1:04:ec:73:9e:8f:7c:c0:70:40:b4:
         b3:20:b9:b6:ad:41:fd:fb:38:4d:8c:76:1b:84:f3:53:41:00:
         02:b3:3c:86:d2:09:a4:08:bb:0e:95:ac:8d:00:fe:02:86:de:
         6f:7d:e5:ab:a2:5d:7f:bc:ee:28:3b:1d:a9:0a:db:63:cc:ec:
         39:48:59:fe:9c:ce:e8:00:0f:0e:e4:6b:67:7c:9a:12:cd:51:
         eb:90:82:20:48:d6:3a:5e:f4:ac:4c:6d:65:45:f4:2a:85:c1:
         56:02:bf:9d:3c:b6:d1:3a:cf:ee:9b:7c:55:81:a0:09:4b:3f:
         4d:6e:f3:c2:d7:3b:5b:ac:bb:fd:75:53:2b:e0:a5:98:a0:c9:
         96:29:24:75:a9:63:e2:dc:8b:c4:7c:15:03:ad:d8:9b:02:a7:
         e2:bd:13:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:12:34 2026 by rpki-client